Security fix: Wipe only by admin